phpbugtracker project records

7 published records for vendor phpbugtracker project.

Researcher profile

Entered KEV: 0 · 0%
Weaponized: 0 · 0%
Pre-auth RCE: 2
With a fix record: 0%
Median publish → KEV: No record has entered KEV

Records by year

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

Attack profile

All records

7 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
39Monitor	CVE-2015-2147Proof of concept	Multiple SQL injection vulnerabilities in Issuetracker phpBugTracker before 1.7.0 allow remote attackers to execute arbitrary SQL commands vphpbugtracker project · phpbugtracker · CWE-89 pre-auth RCE SQL injection	Critical9.8	—	1.6%	Oct 6, 2017
39Monitor	CVE-2015-2146No exploit	Multiple SQL injection vulnerabilities in Issuetracker phpBugTracker before 1.7.0 allow remote attackers to execute arbitrary SQL commands vphpbugtracker project · phpbugtracker · CWE-89 pre-auth RCE SQL injection	Critical9.8	—	1.4%	Oct 6, 2017
36Monitor	CVE-2015-2143Proof of concept	Multiple cross-site request forgery (CSRF) vulnerabilities in Issuetracker phpBugTracker before 1.7.0 allow remote attackers to hijack the aphpbugtracker project · phpbugtracker · CWE-352 Pre-auth CSRF	High8.8	—	1.8%	Oct 6, 2017
33Monitor	CVE-2015-2142Proof of concept	Multiple cross-site request forgery (CSRF) vulnerabilities in Issuetracker phpBugTracker before 1.7.0 allow remote authenticated users to (1phpbugtracker project · phpbugtracker · CWE-352 CSRF	High8.0	—	1.7%	Oct 6, 2017
19Monitor	CVE-2015-2145Proof of concept	Multiple cross-site scripting (XSS) vulnerabilities in Issuetracker phpBugTracker before 1.7.0 allow remote attackers to inject arbitrary wephpbugtracker project · phpbugtracker · CWE-79 XSS	Medium4.8	—	1.5%	Oct 6, 2017
19Monitor	CVE-2015-2144No exploit	Multiple cross-site scripting (XSS) vulnerabilities in Issuetracker phpBugTracker before 1.7.0 allow remote authenticated users to inject arphpbugtracker project · phpbugtracker · CWE-79 XSS	Medium4.8	—	0.6%	Oct 6, 2017
19Monitor	CVE-2015-2148No exploit	Multiple cross-site scripting (XSS) vulnerabilities in Issuetracker phpBugTracker before 1.7.2 allow remote attackers to inject arbitrary wephpbugtracker project · phpbugtracker · CWE-79 XSS	Medium4.8	—	0.6%	Oct 6, 2017

CVE-2015-2147
39Monitor
Multiple SQL injection vulnerabilities in Issuetracker phpBugTracker before 1.7.0 allow remote attackers to execute arbitrary SQL commands v
CriticalCVSS 9.8Proof of conceptEPSS 2%
- pre-auth RCE
- SQL injection
phpbugtracker project · phpbugtrackerOct 6, 2017
CVE-2015-2146
39Monitor
Multiple SQL injection vulnerabilities in Issuetracker phpBugTracker before 1.7.0 allow remote attackers to execute arbitrary SQL commands v
CriticalCVSS 9.8No exploitEPSS 1%
- pre-auth RCE
- SQL injection
phpbugtracker project · phpbugtrackerOct 6, 2017
CVE-2015-2143
36Monitor
Multiple cross-site request forgery (CSRF) vulnerabilities in Issuetracker phpBugTracker before 1.7.0 allow remote attackers to hijack the a
HighCVSS 8.8Proof of conceptEPSS 2%
- Pre-auth
- CSRF
phpbugtracker project · phpbugtrackerOct 6, 2017
CVE-2015-2142
33Monitor
Multiple cross-site request forgery (CSRF) vulnerabilities in Issuetracker phpBugTracker before 1.7.0 allow remote authenticated users to (1
HighCVSS 8.0Proof of conceptEPSS 2%
- CSRF
phpbugtracker project · phpbugtrackerOct 6, 2017
CVE-2015-2145
19Monitor
Multiple cross-site scripting (XSS) vulnerabilities in Issuetracker phpBugTracker before 1.7.0 allow remote attackers to inject arbitrary we
MediumCVSS 4.8Proof of conceptEPSS 2%
- XSS
phpbugtracker project · phpbugtrackerOct 6, 2017
CVE-2015-2144
19Monitor
Multiple cross-site scripting (XSS) vulnerabilities in Issuetracker phpBugTracker before 1.7.0 allow remote authenticated users to inject ar
MediumCVSS 4.8No exploitEPSS 1%
- XSS
phpbugtracker project · phpbugtrackerOct 6, 2017
CVE-2015-2148
19Monitor
Multiple cross-site scripting (XSS) vulnerabilities in Issuetracker phpBugTracker before 1.7.2 allow remote attackers to inject arbitrary we
MediumCVSS 4.8No exploitEPSS 1%
- XSS
phpbugtracker project · phpbugtrackerOct 6, 2017